PT-2000-1758 · Sambar · Search.Dll Sambar Isapi Search Utility+1

Published 2000-11-14 · Updated 2010-01-16 · CVE-2000-0835

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sambar Server version 4.4 Beta 3

Description The issue allows remote attackers to read arbitrary directories by specifying the directory in the query parameter of the search.dll Sambar ISAPI Search utility.

Recommendations For Sambar Server version 4.4 Beta 3, consider restricting access to the search.dll Sambar ISAPI Search utility until a patch is available. As a temporary workaround, avoid using the query parameter in the affected API endpoint.

Exploit

Fix

Related Identifiers

CVE-2000-0835

Affected Products

Sambar Server

Search.Dll Sambar Isapi Search Utility

References · 5

• 🔥 https://exploit-db.com/exploits/20223 · Exploit
• 🔥 http://securityfocus.com/bid/1684 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0835 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0835 · Note
• http://archives.neohapsis.com/archives/bugtraq/2000-09/0175.html · Note